{
  "name": "Brand Intelligence — Monitor brand alerts + auto-report phishing domains",
  "description": "Checks for new brand alerts every 6 hours. If a phishing domain is detected, automatically triggers a takedown report and notifies the security team via Telegram. Uses Mediavox Brand Intelligence API for continuous brand protection.",
  "tags": [
    "mediavox",
    "brand-intelligence",
    "security",
    "phishing",
    "takedown",
    "monitoring",
    "latam"
  ],
  "nodes": [
    {
      "parameters": {
        "rule": {
          "interval": [
            {
              "field": "hours",
              "hoursInterval": 6
            }
          ]
        }
      },
      "name": "Every 6 Hours",
      "type": "n8n-nodes-base.scheduleTrigger",
      "position": [
        240,
        300
      ],
      "id": "ea199b36-f2c1-41e7-9a77-934c1d600312"
    },
    {
      "parameters": {
        "resource": "security",
        "method": "security.brand_alerts",
        "params": "={{ JSON.stringify({ brandId: 'YOUR_BRAND_ID' }) }}",
        "product": "mediaapi"
      },
      "name": "Get Brand Alerts",
      "type": "n8n-nodes-mediavox.mediavox",
      "position": [
        460,
        300
      ],
      "credentials": {
        "mediavoxApi": {
          "name": "Mediavox BI"
        }
      },
      "notes": "Fetches unresolved alerts for your brand: phishing, impersonation, fake social, typosquatting.",
      "typeVersion": 2,
      "id": "cafadb59-bb7a-4201-9be7-838047785131"
    },
    {
      "parameters": {
        "functionCode": "const alerts = $input.first().json.data || [];\nconst critical = alerts.filter(a => a.severity === 'critical' && a.status === 'open');\nif (critical.length === 0) return [];\nreturn critical.map(a => ({ json: a }));"
      },
      "name": "Filter Critical",
      "type": "n8n-nodes-base.code",
      "position": [
        680,
        300
      ],
      "notes": "Only processes critical severity alerts that haven't been actioned yet.",
      "id": "49f881d0-d763-48ff-a8ff-fb30ea2632b5"
    },
    {
      "parameters": {
        "resource": "security",
        "method": "security.brand_alert_action",
        "params": "={{ JSON.stringify({ brandId: 'YOUR_BRAND_ID', alertId: $json.id, action: 'report_phishing' }) }}",
        "product": "mediaapi"
      },
      "name": "Auto-Report",
      "type": "n8n-nodes-mediavox.mediavox",
      "position": [
        900,
        250
      ],
      "credentials": {
        "mediavoxApi": {
          "name": "Mediavox BI"
        }
      },
      "notes": "Triggers automated phishing takedown report via Mediavox.",
      "typeVersion": 2,
      "id": "2167725c-ffcc-47e0-8144-044adf5da0d9"
    },
    {
      "parameters": {
        "chatId": "YOUR_TELEGRAM_CHAT_ID",
        "text": "=⚠️ BRAND ALERT: {{ $json.type }} detected\nDomain: {{ $json.domain }}\nSeverity: {{ $json.severity }}\nAction: Auto-reported for takedown\nDashboard: https://mediavox.co/mvdevportal/dashboard"
      },
      "name": "Telegram Alert",
      "type": "n8n-nodes-base.telegram",
      "position": [
        900,
        380
      ],
      "notes": "Notifies your security team immediately on Telegram.",
      "id": "42f7445c-be51-4b36-b5ec-5bb6f1121361"
    }
  ],
  "connections": {
    "Every 6 Hours": {
      "main": [
        [
          {
            "node": "Get Brand Alerts",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Get Brand Alerts": {
      "main": [
        [
          {
            "node": "Filter Critical",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Filter Critical": {
      "main": [
        [
          {
            "node": "Auto-Report",
            "type": "main",
            "index": 0
          },
          {
            "node": "Telegram Alert",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  },
  "pinData": {},
  "settings": {
    "executionOrder": "v1",
    "binaryMode": "separate"
  },
  "active": false,
  "versionId": "3d7c3477-85fc-4bb9-86ee-a669efc8cd2d",
  "meta": {
    "templateCredsSetupCompleted": true
  }
}